910 matches found
CVE-2025-30475
Dell PowerScale InsightIQ, versions 5.0 through 5.2, contains an improper privilege management vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges...
CVE-2025-4646
Improper Privilege Management vulnerability in Centreon web API Token creation form modules allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4...
Palo Alto Networks GlobalProtect 安全漏洞
Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides features such as firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect, which stems from a potential elevation of...
CVE-2025-4649 ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 befo...
CVE-2025-46744
CVE-2025-46744 describes an authenticated administrator privilege‑escalation flaw: the attacker can modify the Created By username on a user account. Public references tie this to Schweitzer Engineering Laboratories (SEL) products (e.g., SEL‑5033 acSELerator RTAC software and related tools) and m...
CVE-2025-46744 Improper Privilege Management
An authenticated administrator could modify the Created By username for a user account...
CVE-2025-46741
The provided connected sources identify a vulnerability in Blueframe where a suspended or recently logged-out user can continue to interact with the system until the time-out period expires. Affected product is Blueframe; no exact versions are specified in the materials. The root cause, affected ...
Security Bulletin: Security vulnerability in Apache Kafka clients affects IBM Business Automation Workflow Case Event Emitters - CVE-2024-31141
Summary IBM Business Automation Workflow Case Event Emitters package a vulnerable version of Apache Kafka clients. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apac...
PT-2025-17480 · Unknown · Usg Flex H Series
Name of the Vulnerable Software and Affected Versions: Zyxel USG FLEX H series uOS versions V1.31 and earlier Description: An improper privilege management issue in the recovery function could allow an authenticated local attacker with administrator privileges to upload a crafted configuration fi...
SonicWall NetExtender < 10.3.2 Multiple Vulnerabilities (SNWLID-2025-0006)
The version of SonicWall NetExtender installed on the remote host is prior to 10.3.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SNWLID-2025-0006 advisory. - An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client...
CVE-2023-32197
A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5...
Security Advisory 0115
Security Advisory 0115 . CSAF PDF Date: April 15, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 15, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-0505 CVSSv3.1 Base Score: 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Common Weakness Enumeration:CWE- CWE-269: Improp...
Security Advisory 0116
Security Advisory 0116 PDF Date: April 15, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 15, 2025 | Initial release The CVE-ID tracking this issue: CVE-2024-8100 CVSSv3.1 Base Score: 8.7 CVSS:3.1AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N Common Weakness Enumeration: CWE-269: Improper Privilege...
CVE-2025-23008
An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...
CVE-2025-23008
CVE-2025-23008 affects SonicWall NetExtender Windows client (32/64-bit). The issue is improper privilege management that allows a low-privileged attacker to modify configurations, with high impact on confidentiality, integrity, and availability (per CVSS 3.1). The advisory notes upgrade to a fixe...
CVE-2025-23008
An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...
CVE-2025-29800
Improper privilege management in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...
CVE-2025-29800
Improper privilege management in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...
CVE-2025-29800
CVE-2025-29800 affects Microsoft AutoUpdate (MAU), with an improper privilege management flaw that allows an authorized local attacker to elevate privileges. The CVSSv3.1 base score is 7.8 (HIGH), with local attack vector and low attack complexity and low privileges required; impact to confidenti...
